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(54) Abstract Title 

Electromechanical braking system for a motor vehicle 

'S e ^ ctromecha . nIcaI ' brake-by-wire braking system for a motor vehicle, comprises control units 12a, 
14a, H>a, 18a, responsive to a driver's requirement, for controlling brake actuators 12b, 14b, 16b, 18b each 
lt r ' n r, n T"? "I*™ (MlH ' R9 ' 4) 3nd 3 locWng »™fl*n™t (Ku,). For actuating a wheel brake via its 
«rtn I fnn IT^ I*" 9 3rr * n 9*™ nt is first of »« released. The locking arrangement is closed again after 
actuation has been terminated. The control units are supplied with power from independent sources E, E, 
J' S K ' s se ' f ;*agnostic and in the event of a fault in actuator 12b, a resetting module M 1R in the actuator 
is activated by a signal i 1R from control unit 18a, actuators 12b, 18b being on the same axle. In a second 
system (Fig.6), each control unit controls two actuators, and in a third system (Fig.7), each control unit and 
actuator receives power from both sources. 
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2338274 

Electro mechanical braking system for a motor vehicle 



Prior art 

What is described is a decentralized braking ("brake by 
wire") system for a motor vehicle, which system meets, in 
particular, the high technical requirements in respect of 
safety and availability because of its decentralized 
design. 

A braking system of this kind is known, for example, from 
DE-A 196 34 567. The braking system indicated in the 
latter has a decentralized structure in which a pedal unit 
for forming the guide quantities which are dependent upon 
the driver's wishes, and, if necessary, a processing unit 
for taking additional functions into account, and also 
wheel -pair units for controlling or regulating the 
adjusting members of the wheel brakes, are connected via 
one or more communication systems. Furthermore, the 
braking system is supplied with power from at least two on- 
board supply networks. This guarantees satisfactory safety 
and availability of the braking system. More detailed 
observations concerning the brake-adjuster and the taking 
into account of characteristics of the said adjuster in the 
regulation of the system and/or in connection with its 
safety and availability are not described in the said 
specification. 

The object of the invention is therefore to indicate 
measures for taking into account characteristics of a 
brake-adjuster, which comprises a parking brake function 
and/or additional resetting facilities, in the regulation 
of the system and/or in connection with its safety and 
availability. 

This is achieved by means of the characterising features of 
the independent patent claims. 
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Advantages of the invention 

The operating properties of the braking system are 
considerably improved by the interplay of electric motor 
and parking brake (for example of an electromagnetic 
disengaging device) for the purpose of producing a movement 
displacing the brake linings of a disc or drum brake. 

What is particularly advantageous is that, as a result of 
this interplay, the braking moment can be built up and 
maintained with little expenditure of energy. Under these 
circumstances, the use of a disengaging device is 
advantageous, because a braking force which has been 
introduced can be maintained in a lasting manner without 
the expenditure of energy. A parking brake function can be 
easily achieved as a result of this. 

By means of an additional resetting facility it is possible 
to achieve releasing of the brake, even in the case of 
failure of the power supply which is triggered from a 
control unit supplied by another supply system. 

Drawings : 

The invention will be explained in greater detail below 
with the aid of the forms of embodiment represented in the 
drawings. Figure 1 shows a first exemplified embodiment of 
the structure of an electromechanical braking system. 
Figure 2 portrays the structure of the pe£al unit, figure 3 
that of the processing unit, and figures 4 and 5 the 
structures of wheel units belonging to the said braking 
system. Figures 6 and 7 show the structures of a second 
and third exemplified embodiment of an electromechanical 
braking system, while the structure of a wheel unit 
belonging to the third exemplified embodiment is 
represented in figure 8. 
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Description of exemplified embodiments 

What is envisaged is the control or regulation of the 
service brake and parking brake functions of the braking 
installation of a motor vehicle. Through the decentralized 
distribution, of the braking system and the redundancies 
provided for in the system, braking functionality is 
maintained in a high measure if static and dynamic faults 
occur, and the operating reliability of the braking 
installation is ensured. In addition, fault conditions are 
stored for servicing purposes aijd, if necessary, signalled. 
In this connection, the abbreviated designations introduced 
in the text and figures for components and signals are 
summarised in the appendix. 

Figure 1 shows a first exemplified embodiment for the 
structure of an electronic braking system and the signals 
exchanged in each case. The system is characterised by a 
decentralized structure which ensues from the following 
system components: pedal unit 10, four wheel units 12, 14, 
16 and 18, power diagnostic unit 20 and processing unit 22. 

The pedal module 10 of the electromechanical braking system 
handles, primarily, detection of the driver's wish for 
braking, analysis of the overall condition of the system 
and the initiation of fall-back strategies in the event of 
a fault. 

Each wheel unit (12, 14, 16, 18) is made up of a wheel 
module (12a, 14a, 16a, 18a), the wheel sensor system (cf., 
for example, nl, Fli, slH, etc.) and an actuator (12b, 14b, 
16b, 18b) . A wheel module (12a, 14a, 16a, 18a) comprises, 
in each case, a microcomputer system, a monitoring 
component and the power electronics for triggering the 
actuator. 
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The supplying of the electrical system with electrical 
power takes place via the two independent on-board supply 
networks Ej and E 2 . Two wheel units at a time are supplied 
from the same power source. In the system structure 
5 considered in figure l, the starting point is a diagonal 
distribution, that is to say the wheel units (12, 14) for 
the left front and rear right wheels are fed by a common 
power source The same applies to the wheel units (16, 

18) for the front right and rear left wheels, which are 

10 supplied from the power source E 2 . A design variant in 

which the two wheel units on one axle are each associated 
with a power source is likewise possible, but no further 
consideration will be given to this in what follows. In 
that distribution, the modes of procedure described below 

15 are likewise used with the corresponding advantages. The 
wheel units are disposed in the vicinity of the particular 
wheel brake, while the pedal unit and processing unit are 
mounted, either together or separately, at a central point. 

2 0 The exchange of data between the individual components of 
the braking system occurs by means of two independent 
communication arrangements K x and K 2 , which are preferably 
realised as serial bus systems, for example CAN'S. The 
communication arrangements K x and are fed by the various 

25 on-board supply networks. In addition, connection to the 

control unit of the engine management system is realised by 
means of a communication system K 3 . 

Triggering of the appertaining actuator fpr stabilizing the 
30 desired clamping force or the desired braking moment is 

realised in each wheel module. For this purpose, the wheel 
clamping force or wheel braking moment is detected by 
sensors in each actuator alternately. The 

electromechanical actuator acts, via a gear unit stage, on 
35 the clamping paths of disc or drum brakes without a 
hydraulic intermediate stage. 
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For this purpose, the wheel unit regulates the clamping 
force or braking moment specific to the individual wheel. 
The necessary guide quantity is predetermined via the 
associated bus system. 

In a preferred exemplified embodiment, the actuator (12b, 
14b/ 1Gb, 18b) of a wheel unit additionally contains an 
electromagnetically ventilated disengaging device 
(triggering via ilK, i2K, i3K, i4K) which, on the one hand, 
exercises the parking brake function and in addition, in 
stationary braking phases, lockg the braking system in the 
current position without consuming power. In addition, 
there is integrated into the actuator (12b, 14b, 16b, 18b) 
of any one wheel, a resetting arrangement (triggering via 
ilR, i2R, i3R, i4R) which, in the case of all types of 
faults which would prevent release of the brakes of a 
wheel, clears the affected wheel. In order to be able to 
master these types of faults, even in the case of failure 
of a power diagnostic unit (20) , the resetting arrangement 
is triggered by the adjacent wheel unit on the same axle 
(for example, from 18a for 12b) . In the case of the 
diagonal distribution of the power circuits which is under 
consideration, the two wheel units on one axis are always 
fed from different power sources. As a result of this it 
is possible, in the case of failure of one power source, to 
achieve at least triggering of" the affected actuator by 
means of the resetting arrangement in any condition 
whatsoever. 

The power diagnostic module (20) ascertains the state of 
charge of the power supply units and delivers this 
information (c 17 c 2 ) to the pedal module (10) . 

A more detailed description of the functions and structure 
of the system components of the electromechanical braking 
system will be given in the following sections with the aid 
of figures 2 to 5 . 
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6 

Figure 2 shows the composition of the pedal module (10) in 
principle . 



The tasks of these system components are the detection of 
5 the driver's wish for braking, namely in respect of the 
service brake and parking brake, and the formation of the 
guide quantities necessary for this purpose for the wheels 
on the front and rear axles; the detection and evaluation 
of the status messages of all the system components of the 

10 electromechanical braking system; the analysis of the 
current overall condition of the braking system and, if 
necessary, the initiation of fall -back measures and the 
signalling of the fault condition to the driver or else 
storage within a fault memory; the initializing of all the 

15 components of the braking system after the ignition is 

switched on or when the brake is actuated with the ignition 
switched off; the switching-of f of the braking system after 
a journey has been completed; and the triggering of the 
brake light. 

20 

Detection of the driver's wish for a service braking 
operation is effected by the independent sensors b w b 2 and 
b 3 which, preferably in a diversitary realisation, detect 
the driver's wish in analog form (brake pedal angle and/or 

25 the force of actuation) at the brake pedal. The sensors 
are fed by the different power supplies E x or E 2 , e.g. the 
sensors b x and b 2 by the power supply E x and the sensors b 2 
and b 3 by the power supply E 2 . The driver's wish for 
actuation of the parking brake is detected via the sensors 

30 b 4 and b 5 (likewise, for example, by detecting the 

deflection of the parking brake lever) , which are fed by 
the various power supplies.. One analog sensor each for 
detecting the wish for service braking and the wish for 
parking braking could also be replaced by a binary 

35 transmitter. 
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The pedal module 10 itself is designed so as to be fault - 
tolerant, for example by realisation by means of a 
redundant microcomputer system, which consists of the 
microcomputers P a and P 2 and, in addition, contains the 
necessary peripheral, memory and watchdog assemblies, and 
also by means of a monitoring component p 3 . The 
microcomputers p l and p 2 and also the monitoring component 
p 3 communicate via the internal communication channel C 
which is realised, for example, by a serial bus system or 
with the aid of serial interfaces. Within the 
microcomputer systems p x and p 2 ,>the independent programs 
Prl and Pr2 are implemented. By means of the computer 
program Prl and via the input interface U x , the sensor 
signals b a to b 5 are detected, stored and made available to 
the microcomputer P 2 via the communication channel C. In a 
corresponding manner, the sensor signals b x to b s are 
detected, stored and transmitted to the microcomputer Pi by 
means of the computer program Pr2 and via the input 
interface U 2 . 6 measured values of the driver's wish for 
service braking and 4 measured values of the driver's wish 
for actuation of the parking brake are therefore available 
within the two computers. 

A representative signal value for the wish for service 
braking b ht rep is ascertained in the microcomputers P x and 
P 2 , in each case, from the measured values for the service 
braking operation, by majority selection in each case. 
This takes place with weighting of possible individual 
faults, through the fact that those individual measured 
values which differ from the others beyond a certain 
measure are not drawn upon for forming the reference 
values. The reference values calculated in the 
microcomputers P x and P 2 are designated by h BtTePtl and b B , rep , 2 
respectively . If the reference value b* #rePfl exceeds a 
predeterminable limit value, the brake light is triggered 
by means of the signal u BL . 
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Representative signal values are likewise calculated in the 
two microcomputers from the measured values of the driver's 
wish for actuation of the parking brake. The 
representative signal values ascertained in the 
5 microcomputers P l and P 2 are designated by b F#repl and b Frep2 . 
These representative signal values are the maximum values 
of the measured sensor signals b 4 and b s when the motor car 
is at a standstill (as is ascertained, for example, by- 
evaluating one or more wheel speed signals) , and the 
10 minimum values of the said two sensor signals when the 

motor car is in the moving state (that is to say is other 
than at a standstill) . 

The guide quantity for the desired mean clamping force or 
15 desired mean braking moment of a wheel in the course of a 
service braking operation is calculated from the reference 
values b B rep<1 and b B#rep2 in the two microcomputers by means 
of a stored pedal characteristic in each case. This guide 
quantity is designated by F B#res<1 in the microcomputer P x and 
2 0 by F B re8 2 in the microcomputer P 2 . 

The driver's wish for the mean clamping force or the mean 
braking moment of a wheel in a parking braking operation is 
likewise ascertained from the sensor signals b Frep#1 and 
25 b Frep2 in the microcomputers P 1 and P 2 , in each case using a 
predeterminable stored characteristic line. This guide 
quantity is designated by F Frea tl in the microcomputer P x and 
by F F ,res,2 in the microcomputer P 2 . 

30 The guide quantities calculated in a microcomputer for the 
wish for service braking and the wish for parking braking 
are made available to the other microcomputer in each case 
via the internal communication channel C. In the two 
microcomputers, F B#res #1 is compared with F B<re8#3 and F F#res tl with 

35 F F.res,2- If the compared values agree, in each case, within 
a predeterminable tolerance limit, a resulting quantity for 
the wish for service braking F B reB is formed by taking the 
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arithmetic mean of the quantities F B#re9il and F B res 2/ and the 
resulting quantity for the wish for parking braking F Frcs is 
formed by taking the arithmetic mean of the quantities 

* F, res, 1 

and F F reB#2 . 

If the compared values do not agree, the fault- free signal 
values both for the wish for service braking and also for 
the wish for parking braking are clearly detected by means 
of the monitoring component P 3 on the basis of the computer 
monitoring operation described below. In the two 
microcomputers, the fault -free signal values are assigned 
to the quantities F B , res and F F , rea respectively. 

The resulting mean clamping force of a wheel F res arises 
from the signals F Brre8 and F P#r „ as a result of the relation 
F res = maximum (F BreB , F Fre8 ) . In an alternative embodiment, 
F re B might also correspond to the resulting mean braking 
moment of a wheel which is required by actuation of the 
service or parking brake. The desired clamping forces or 
braking moments for the wheels of the front axle F v or for 
the wheels of the rear axle F H are calculated from F res for 
the purposes of suitable distribution. 

By means of the communication systems K x and IC,, the pedal 
module transmits the desired values for the clamping forces 
or braking moments F v and F H to the connected components of 
the electromechanical braking system. 

As a result of the diversitary detection and calculation, 
faults which would lead to unintended braking or to an 
incorrect guide quantity for the wheel clamping force or 
wheel braking moment, are identified. Adulterated memory 
contents, which would lead to an identical fault effect, 
are also identified. The monitoring component P 3 
communicates with the microcomputers P x and P 2 respectively 
by means of the internal bus system C. It serves to 
monitor the program flows in the programs Prl and Pr2 and, 
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in addition, to check the computing capacity of the 
microcomputers P 1 and P 2 . In order to guarantee safety in 
the event of a computer fault in P x or P 2 , the programs Prl 
and Pr2 must nevertheless still run correctly in this event 
5 of a fault, or else the incorrect manning must be reliably 
identified. In the case of incorrect running, the 
appertaining computer channel is switched off and fault 
signalling occurs via the signals dp! and dp 2 respectively. 
In the variant of embodiment represented, verification of 

10 operability takes place by a question/answer communication. 
The microcomputers P x and P 2 collect a question from the 
monitoring component and answer it, in each case taking 
into account all the parts of the program that are relevant 
to safety, within a predetermined time interval. The 

15 questions are to be predetermined in such a way that a 

correct answer is given only if there is fault -free running 
of these parts of the program, particularly of the computer 
functioning test (RAM test, ROM test, etc.) and of the 
command test (as regards addition, subtraction, etc.). The 

2 0 partial answers formed from the partial programs are 

combined in each microcomputer to form an overall answer. 
In the monitoring component, the overall answers supplied 
by the microcomputers P x and P 2 in each case are checked in 
respect of the time interval of arrival and for agreement, 
25 with accuracy to the last bit, with the correct answer 

matching the question, and fault-mastering strategies, for 
example signalling and the switching-of f of a channel, are 
initiated if necessary. The operability of the monitoring 
component is checked by the microcomputer^ P x and P 2 by 

3 0 means of suitable test questions. These test questions can 

be correctly answered by the monitoring component only if 
the functioning is completely correct. 

In the pedal module, the internal fault conditions and 
3 5 fault signal messages d 1# d 2 , d 3 and d 4 from the wheel units 
connected, and the fault message d,, from the processing unit 
are also detected and stored in a fault memory. The status 
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signals c 1 and c 2 from the power diagnostic unit are also 
detected. This detection occurs both during a test phase 
before the start of a journey and also in all the 
operational phases of a journey. All the fault and status 
signals are evaluated within the pedal module by means of 
predetermined tables in which there is deposited, for each 
type of fault and for each status, an action which is to be 
performed. As a result of the evaluat ion. there are 
initiated in the journey phase, in a manner corresponding 
to the endangering potential of the fault conditions, 
messages for fall -back strategics in the various components 
of the braking system, which messages are transmitted to 
the processing unit and the wheel units by means of the 
signals r x , r 2 , r 3 , r 4 and r v . In the case of faults which 
are relevant to safety, these are signalled to the driver 
by means of the fault signals d P1 or d P2 . In the case of 
fault conditions which are detected in the test phase 
before the start of a journey, these are likewise signalled 
to the driver. In the case of fault conditions which are 
critical to safety, initializing of the braking system is 
discontinued and the releasing of the parking brake is. 
prevented. In the case of operating conditions critical to 
safety that occur during a journey, intervention in the 
engine management system is also possible in order to 
reduce the driving moment available. 

By means of the signal lines z x and z 2 respectively, the 
other components of the electromechanical braking system 
are initialized by the pedal module after the switching-on 
of the ignition or even when the brake is actuated with the 
ignition switched off. Selective switching-of f of the 
system components also takes place by means of these 
signals when the journey has been completed. 

The servicing interface d s enables the servicing personnel 
to have access to the braking system and to read out the 
fault memory for the entire system. 
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The power diagnostic unit (2 0) handles the monitoring of 
the power supply units (batteries) with regard to adequate 
capacity for the output and power required in braking 
operations. For this purpose, it is necessary to ensure at 
5 least the power needed for achieving the minimum braking 
action prescribed by the legislature. Monitoring takes 
place by means of suitable sensors L x and L 2 , for example 
for measuring the charging and feeder currents, and by 
means of a mathematical model. This model takes into 

10 account the electrochemical and physical properties, and 
also the antecedents, for example the number of total 
discharges, of the power supply units. The power 
diagnostic unit is preferably realised in the form of a 
redundant microcomputer system which is fed via both power 

15 sources and the partial systems of which are able to 
exchange data via an internal bus system. 

The primary functions of the braking system are carried out 
in the processing unit (22) . These include, in particular, 

20 the calculations of the guide quantities F x , F 2 , F 3 and F 4 
specific to the individual wheels for the clamping forces 
or braking moments of a wheel. The calculations take place, 
incorporating known principles such as the taking into 
account of the rotational speeds specific to the wheels in 

25 full braking operations for the purposes of ant i- locking 
protection, the taking into account of a drive- slip 
regulating function, the implementation of travel -dynamics 
control in order to avoid skid conditions, with the 
incorporation of other sensors, for example for steering 

30 wheel angle 5 h , transverse acceleration a^ and yaw angle 
velocity the taking into account of the brake lining 
thickness specific to the individual wheels in partial 
braking operations with the aim of achieving uniform 
wearing of the brake linings, the implementation of a hill- 

35 holder function, the taking into account of the load 
condition in order to achieve optimum distribution of 
braking force to the wheels of the front and rear axles, 
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the achieving of an adaptive braking force distribution 
between that wheel of an axle which is on the inside of a 
bend and the wheel which is on the outside of a bend in 
dependence upon the measured steering angle in order to 
5 achieve improved travel dynamics, corrections to the 

individual braking forces in the case of failure of a wheel 
unit, selective interventions in the engine management 
system in the case of a wish for braking via the 
communication system K 3 , and intervention in the engine 
10 management system in the event of a fault in the braking 

system which is critical to safety. In addition, the 

f 

processing unit also has available the measured actual 
values of the regulating quantities Fli, F2i, F3i and F4i 
for calculating the guide quantities Fl to F4 specific to 
15 the individual wheels. Optionally, it is also possible for 
the determination of travel -dynamic reference quantities 
for supporting the monitoring functions to be ascertained 
within the wheel units! Details will be explained when 
describing the functions of the wheel unit. 

20 

According to figure 3, the processing unit (22) is made up, 
in a redundant manner, of two microcomputer systems RV1 and 
RV2 which exchange the calculated data via an internal 
communication channel CI. Via the two communication 

25 systems K x and K 2 , the processing unit (22) receives, from 
the wheel units (12 to 18) , the rotational speeds (nl to 
n4) specific to the individual wheels, the actual values of 
the clamping force or braking moment (Fli to F4i) and, from 
the pedal unit (10) , the guide quantities for the clamping 

3 0 force or braking moment for the wheels of the front axle F v 
or for the wheels of the rear axle F H . 

In the case of failure of a computer channel in the pedal 
unit (10) , the transport of data via the connected 
35 communication system is interrupted. In this fault 
situation, the processing unit (22) conveys the guide 
quantities F v and F H/ which are received by the other 
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computer channel of the pedal module (10) and are specific 
to the individual axles, and also messages (rl to r4) for 
the fall-back strategies, to the connected wheel units (12 
to 18) . Moreover, in the case of this fault, the 
5 diagnostic messages (dl to d4) of the wheel units can be 
passed on to the operative computer channel of the pedal 
module. For this purpose, failure of the microprocessor P 2 
in the pedal module will be considered as an example. In 
this event of a fault, the messages can be conveyed by the 

10 pedal module, via the communication system K x and the 
processing unit, to the wheel modules 2 and 4. The 
diagnostic messages from the wheel modules 2 and 4 take the 
reverse route. For calculating those guide quantities 
specific to individual wheels which are required for a 

15 travel -dynamics control function, the quantities necessary 
for this purpose (steering angle, transverse acceleration 
and rate of rotation) are additionally detected in the 
processing unit (22) . 

2 0 The abovementioned calculations are carried out 

independently in the two computer systems RV1 and RV2 , and 
compared with one another. If the results are 
inconsistent, the processing unit is switched off and a 
fault status message d v is dispatched via the communication 
25 system. 

Operations regulating the clamping forces or braking 
moments specific to individual wheels are realised within 
the wheel units. The communications systems K r and K 2 

3 0 supply the guide quantities for this purpose. 

The wheel units are fed by different electrical power 
sources, the wheel units 12 and 14 from power source E a , and 
the wheel units 16 and 18 from power source E 2 . In 
3 5 addition, connection of the wheel units to the other system 
modules is realised with the aid of different communication 
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systems. Wheel units 12 and 14 communicate via K lf and 
wheel units 16 and 18 via K 2 . 

Consideration will be given below to the wheel unit 12 
according to figure 4. The other wheel units are made up 
in a corresponding manner. The wheel unit 12 serves for 
regulating the clamping force or braking moment of a wheel, 
and for initiating a retraction strategy in the case of a 
breakdown in the actuator 18b of the wheel unit 18. The 
wheel unit 12 communicates with the other system components 
by means of the communication system K a . Via the said 
system, the wheel unfit receives the following quantities: 

F x : Guide quantity specific to the individual wheel for 

regulating the clamping force or braking moment of the 
wheel. This quantity is supplied at the same point in 
time as an intervention by the processing unit (22) 
for anti-locking protection, anti-slip regulation or 
travel -dynamics control purposes. In another variant 
of embodiment, this guide quantity might additionally 
be calculated by the processing unit specifically for 
the following tasks: 

a) for achieving uniform wearing of all the brake linings 
of a vehicle 

b) for adapting the distribution of the driver's overall 
wish for braking moment to the wheels of the front or 
rear axle in dependence upon the momentary axle load 
distribution 

c) for achieving an adaptive braking force distribution 
between that wheel of an axle which is on the inside 
of a bend and the wheel on the outside of the bend, in 
dependence upon the steering angle measured, in order 
to achieve improved travel dynamics. 

P v :^ Substitute front axle guide quantity for the clamping 
force or braking moment of a wheel on the front axle. 
(The substitute guide quantity F H is used in a 
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corresponding manner for the wheel units associated 
with the rear axle.) The guide quantity F v is formed 
from the driver's wish for service braking and parking 
braking and supplied to the two wheel units on the 
5 front axle and also to the processing unit. The guide 

quantity specific to the axle is used within a wheel 
unit for regulating the clamping force or braking 
moment, provided no differing guide quantity specific 
to the individual wheel has been formed in the 
10 processing unit, or else in the case of failure of the 

processing unit. 

r^ Control message for initiating a modified processing 

flow in the wheel unit. This message is formed by the 
15 pedal unit or the processing unit from the fault 

signal messages arriving from the system modules 
connected. 

The signals arriving via the communication system are 
20 deposited, in a redundant manner, in the memory cells Si of 
the microcomputer system R 1A . In variants of embodiment, 
the following other signals arriving via the communication 
system K x may additionally be processed for monitoring the 
functioning of the wheel unit: 

25 

a R2/ a R3' ^R4f • Decelerations of the other wheels 
a v< ref : Reference value for the deceleration 

difference between the wheels on the front 

axle 

30 Sr2, s R3 , s R4 , : Slip of the other wheels 

AS Vref : Reference value for the slip difference 

between the wheels on the front axle 
v F : Estimated value for vehicle speed 

35 As the output quantities of the wheel unit, the following 
signals are fed into the connected system modules via the 
communication system K x : 
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n i : Edited rotational speed signal of the 

associated wheel 
d i : Cyclical fault signal message of the wheel 

unit 

F1 i Measured actual value of the regulating 

quantity 

In variants of embodiment, the following other quantities 
are additionally needed by the wheel unit 12 for monitoring 
functioning in the other wheel units: 

r 

a Ri : deceleration of the associated wheel 

Sri : slip of the associated wheel 

These signals are supplied to the other system modules via 
the communication system K x . 

The wheel unit 12 comprises the following components: 

a) Microcomputer system R 1A with the appertaining 
peripheral, memory and watchdog assemblies 

b) Monitoring component R 1B 

c) Electric motor M 1H including the required gear unit 
stage for converting the rotational movement into a 
movement advancing the brake lining of a disc or drum 
brake 

d) Electromagnetically ventilated disengaging device Ku t 
which engages with a shaft lying within the moment 
flux between the electric motor and the brake lining 
and which, in the current -less condition, is closed by 
means of a spring element and, in this condition, 
ensures that the current angular position of the shaft 
is maintained. The design of this disengaging device 
must ensure that any clamping force inserted can 
thereby be adhered to on the brake disc. 

e) Resetting module M 1R realised in the form of an 
electromagnetically actuatable disengaging device or 
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as an electric motor. This module is fed by the power 
source E 2 and triggered by the wheel unit 18. 
f) Power electronics LE 1H for triggering the electric 
motor M 1H 

5 g) Power electronics LE 1K for triggering the 

electromagnet ically actuated disengaging device Ku x 
h) Power electronics LE 2R for triggering the resetting 

module M 2R which is integrated into the wheel unit 18. 

10 Items c) , d) and e) will be designated below as the 
actuator 12b of the wheel unit 12. 

The following input signals originating from the associated 
wheel are fed into the microcomputer system R XA via 

15 peripheral input assemblies and deposited in a redundant 
manner in the memory cells S 1 : the rotational speed n x of 
the wheel , the actual value for the wheel clamping force or 
wheel braking moment F li# the clamping path or angle of 
rotation of the gear unit stage or of the electric motor S lH 

20 and, if necessary, the motor current of the actuator i 1H< 

Within the microcomputer R^, the guide quantity F 1F is first 
of all selected from the quantities F x or F v received 
cyclically via the cornmunication channel. By means of the 
2 5 actual value F 2i currently measured for the wheel clamping 
force or wheel braking moment, the regulating difference 
is formed therefrom in accordance with 



With limit values € and /x, which are to be predetermined, 
and time intervals T c and T„, the comparisons can then be 
carried out in accordance with 



x dl (t) = F XF (t) - F 1A (t) 



(1) 



35 



I x*i(t) | 



for 0 < t < T € 



(2) 



| Xdxtt) / dt | 



for 0 < t < T„ (3) 
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If the conditions (2) and (3) are fulfilled, no adjusting 
interventions of any kind are carried out at the actuator. 
If this condition is not fulfilled, the required, current 
adjusting quantity for stabilizing the wheel "clamping force 
or wheel braking moment is calculated by means of a digital 
regulating algorithm, taking into account the last 
adjusting quantity outputted (for example from a 
proportional/integral regulator or from a 
proportional/integral/differential regulator) . This 
adjusting quantity is outputted to the power electronics 
LE 1H in the form of the PWM signal u 1H . In addition, the 
electromagnetically ventilated disengaging device Ku x is 
triggered via the control signal f x and the power 
electronics LE 1K/ as a result of which a rotational movement 
of the motor for achieving a modified wheel clamping force 
is made possible for the first time. If the conditions (2) 
and (3) are fulfilled during the stabilizing of the 
clamping force or wheel braking moment, triggering of the 
electromagnetically actuated disengaging device Ku x is 
terminated and the electric motor M 1H is then switched so as 
to be devoid of current . In order to avoid an unwanted 
modification of the wheel clamping force because of a 
malfunction of the microcomputer system R 1A/ triggering of 
the electric motor by means of the current i 1H is made 
possible only if the clearing signal g 1H and, in addition, 
the clearing signal e 1H from the monitoring component R 1B are 
lining up at the triggering part of the power electronics 
LE 1H (cf . & linkage in LE 1H ) . 

In order to also be able to avoid an unwanted diminution in 
the wheel clamping force maintained by the disengaging 
device, triggering of the disengaging device Ku t by means of 
the current i 1K is possible only if both the clearing signal 
g 1H and the clearing signal e 1H are supplied by the 
monitoring component R 1B (cf & linkage in LE 1K ) . As a result 
of the inclusion of the electromagnetic disengaging device 
in the regulating operation it is possible, in the case of 
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an approximately stationary braking wish on the part of the 
driver, for the required clamping force to be initially 
applied via the electric motor and then maintained, without 
the consumption of electrical power, solely by the spring 
forces within the electromagnetically actuated disengaging 
device. By this means, the clamping forces required when 
the parking brake of a motor vehicle is actuated can easily 
be initiated and also retained without power. For 
releasing the brake on a wheel, the disengaging device is 
first of all opened by means of the triggering signal f lf 
and then the electric motor M 1H is triggered with negative 
voltage. If this release is prevented by a fault in the 
actuating system, for example as a result of sticking of 
the gear unit stage in the said actuating system, this 
fault can be clearly identified with the aid of the 
measured wheel clamping force or wheel braking moment . 
This takes place, for example, by comparing the triggering 
and the rotational speed of the wheel and, if necessary, 
the angle of rotation. Jamming is identified if, for 
example, in spite of actuation, no change in the angle of 
rotation of the electric motor is identified and/or, in the 
case of non- triggering, braking slip of the associated 
wheel is present. Regulation is thereupon discontinued and 
a fault message d x is dispatched via the communication 
system. This message is evaluated in the pedal unit (10) 
and, as a result of this, a fault-eliminating measure is 
initiated. By means of a fall -back message r 2/ which is 
sent via the communication system K^, the wheel unit 18 
represented in figure 5 receives the information to trigger 
the resetting arrangement M 1R i'fe the actuating system 12b 
via the power electronics LE 1R and the signal i JR . Since the 
resetting arrangement M 1R is triggered by means of the power 
source E 2 , releasing of the braking function of the wheel 
associated with the wheel unit 12 can be carried out, even 
in the case of failure of the power source E x . 
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In the wheel unit 12, there is a corresponding reaction to 
a fall -back message r x which contains the information for 
releasing the wheel which has been braked as a result of a 
fault situation and is associated with the wheel unit 18. 

5 This type of message leads to the outputting of the signal 
U 2R , with which the power electronics LE 2R are activated. 
The control signal i 2R for addressing the resetting 
arrangement in the actuator 18b is, however, only activated 
if the clearing signals g 2R and e 2R are available (cf . & 

0 linkage in LE 2R ) . 

The correctness of the measured actual value of the wheel 
clamping force or wheel braking moment can be ensured by an 
analytical redundancy. If this redundancy is realised in 
5 accordance with the invention, one or more of the following 
measures can be carried out : 

Comparison of the actual values of the wheel clamping force 
or wheel braking moment with a reference quantity F ra . For 
determining F r , a/ the change in the position-measuring 
quantity or rotational angle-measuring quantity s 1H is first 
of all measured from the point in time at which the braking 
operation starts, and is then converted to the physical 
dimension of a force or moment by means of a design- 
determined function. This function takes into account all 
the elasticities of the components disposed in the power 
flow of the actuator. In the event of regulation of the 
wheel braking moment, another temperature -dependent 
friction model of the brake disc (for example a modelling 
of the warming-up and cooling-down of the disc) is 
additionally implemented in the function. 

Comparison of the actual value of the wheel clamping force 
or wheel braking moment with a reference quantity F rb . For 
determining F r#b , the current of the electric motor M 1H is 
measured during a stationary braking phase and is then 
converted to the physical dimension of a force or moment by 
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means of a function which has been determined beforehand. 
This function takes into account, first of all, the design 
data of the electric motor and of the gear unit, if 
necessary with the incorporation of a temperature and 
5 friction model. In addition, the current effective input 
voltage is taken into account, and so too is the direction 
of rotation before the stationary working point is reached. 
In the event of regulation of the wheel braking moment, 
another temperature -dependent friction model of the brake 
10 disc can additionally be implemented in the function. 

Another method is based on comparative observation of the 
deceleration of the wheels in the partial braking range. 
Calculation of the wheel decelerations in the individual 
15 wheel units is started by means of a message from the 

processing unit at the point in time T x . Calculation of the 
deceleration of the wheel associated with the wheel unit 12 
takes place in accordance with the equation 

20 a R1 (T x ) = C a [ n(T x ) - n(T x - T a ) ] (4) 

In the latter, T a is the cyclical scanning time at which the 
detection of rotational speed is carried out at each wheel 
unit, and C x is a constant which is fixed by the wheel 
25 geometry and the scanning time. 

From the deceleration values of the wheels on the front 
axle a R1 (T x ) and a R2 (T x ) , the deceleration difference Aa v (T x ) 
of the front axle wheels is formed: 

30 

Aa v (T x ) = a RX (T x ) - a^ (T x ) (5) 

The value a w (T x ) required for this purpose is fed in by the 
wheel unit 18 via the communication system K x . For the 
35 deceleration difference Aa v (T x ), the following must apply, 
with correct functioning of the clamping force or braking 
moment regulating system: 
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aa v (T x ) - A a- 



V,ref 



(T x ) 



(6) 



In the latter, Aa v ref is a reference value for the 
deceleration difference between the wheels on the front 
axle. e 9 describes a parameterizable fault limit value. 
The reference value Aa Vref is calculated in the processing 
unit by means of a mathematical model, using the cyclically 
detected travel -dynamic reference quantities: steering 
wheel angle 6 L , transverse acceleration a y and yaw angle 
velocity and also taking into account an estimated value 
for the vehicle speed v F . If the condition (6) is violated, 
a fault in the clamping force or braking moment sensor of 
one of the wheels can be inferred therefrom. Through the 
use of both wheels on an axle, for identifying faults, 
disturbance quantity influences which act upon both wheels 
are eliminated. In this process, the assumption proceeded 
upon is that the functionality of the regulating algorithm 
and of the adjusting quantity output, and also the fault - 
free detection of the rotational speeds at both wheels on 
the front axle, are ensured by other monitoring methods. 
The assigning of an identified fault to wheel unit 12 or 
wheel unit 18 takes place by incorporation of the two wheel 
deceleration values for the rear axle a R3 (T x ) and a R4 (T x ) (for 
example, by comparison of the individual quantity with the 
corresponding quantity from a rear wheel) . 

Another method is based on comparative observation of the 
slip values of the individual wheels in the partial braking 
range. Calculation of the slip in the individual wheel 
units is started by means of a message from the processing 
unit at the point in time T x . Within the wheel unit 12, the 
slip of the associated wheel is calculated with the aid of 
the rotational speed n a of the wheel and the estimated value 
for the vehicle speed v P in accordance with the equation 

s R1 (T x ) = 1 - C 2 n r (T x ) /v F (T x ) (7) 
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The constant C 2 is determined by the wheel geometry. By 
means of the wheel slip s R2 (T x ) , which is fed in by the 
wheel unit 18 via the communication system, the difference 
in slip between the wheels on the front axle as v can be 
5 calculated in accordance with 

as v (T x ) = s R1 (T x ) - s„(T x ) (8) 

For the difference in slip as v (T x ) , the following must 
10 apply, with correct functioning of the clamping force or 
braking moment regulating system: 

| as v (T x ) - AS v<ref (T x ) | < e g (9) 

15 In the latter, AS Vref is a reference value for the 

difference in slip between the wheels on the front axle. e 8 
describes a parameterizable fault limit value. The 
reference value AS v , ref is calculated in the processing unit 
by means of a mathematical model of the travel dynamics, 

20 using the cyclically detected measuring quantities: 

steering wheel angle 6 L , transverse acceleration a y and yaw 
angle velocity and also taking into account the guide 
quantities specific to the individual wheel for the 
clamping forces or wheel braking moments: 

25 

AS Vref (T x ) = f a { 6 L , ay, ¥, F lt F 2 , F 3 , F« } (10) 

In another variant of embodiment, an improved reference 
quantity AS v#ref can be ascertained, incorporating measured 

30 values or estimated values for", the wheel loads F N1 , F,^, F N3 
and F N4 . For that purpose, AS v>ref is formed in the 
processing unit via an expanded dynamic model. As a result 
of this, influences which are caused by displacement of 
wheel loads are taken into account in the calculation. If 

35 the condition (9) is violated, a fault in the clamping 

force sensor or braking moment sensor of one of the wheels 
can be inferred therefrom. In the process, the assumption 
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proceeded upon is that the functionality of the regulating 
functions and also the fault -free detection of the 
rotational speeds at both wheels on the front axle are 
ensured by other monitoring methods. The assigning of an 
identified fault to wheel unit 1 or wheel unit 2 takes 
place by incorporation of the two slip values for the 
wheels of the rear axle s R3 (T x ) and s R4 (T x ) (for example, by 
comparison of the individual quantity with the 
corresponding quantity for a rear wheel) . 

The monitoring concept of the wheel modules is structured 

r. 

with the aid of the four logic planes L 17 L 2/ L 3 and L 4 and 
two hardware planes. The microcomputer system R 1A and the 
monitoring component R 1B operate in the hardware planes. 

. The monitoring component R 1B communicates with the 
microcomputer system R 1A by means of an internal bus system. 
It serves to check the computing capacity of the said 
microcomputer system and to monitor the program flows 
within the computer. The chosen type of data communication 
between the microcomputer system R 1A and the monitoring 
component R 1B permits mutual monitoring of the said 
components. To this end, the following tasks are assigned 
to the logic planes: 

One plane 1 is realised in the microcomputer system R 1A . It 
handles the following tasks: calculation of the regulating 
function for triggering the electric motor M 1H ; triggering 
of the electromagnetically actuated disengaging device Ku x ; 
triggering of the resetting module M 2R ; calculations for 
checking the correctness of the measured actual value of 
the wheel clamping force or wheel braking moment by 
means of the analytical redundancy represented. 

One plane 2 is likewise integrated into the microcomputer 
R 1A . This plane handles the testing of the correctness of 
the calculations carried out in plane 1 by means of 
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For 



algorithms which are diversitary to those in plane 1 
carrying out the calculations, uae is -de. in addition, of 
the input data deposited in a redundant manner in the 

as a result of which faults can be 
s "f d y aduVterated memory contents. The checking of 
he functioning of the regulator takes place by mean, . o a 
mathematical model of the regulator which is connects xn 
oarallel and is calculated with the data, which are 
deposited in a redundant manner, for the alternative guide 
X„ Entities or and with the actual value of th, = w . el 
clamping force or wheel braking moment F„. « there are 
iguificant deviations between the model output quantity 
and the calculations carried out in plane 1, a fault 
Edition is identified. In addition .correct ™ing 
c f rh „ reoulating section is also checked in plane 2. This 
ee if served by a mathematical model of the regulating 
= iTi-i- the dynamic correlation between^he 
ad-lusting quantity and the regulating quantity F„ even with 
tne incorporation of disturbance quantities. The adjusting 
2 0 qTantitylalculated in the regulating algorithm in plane 1 
is fed into this model. If there are significant 
deviations between the model output quantity and the actual 
value measured for the wheel clamping force or wheel 

T? a fault condition is identified. Tne 
braking «*F a; . fault omagnetically venti lated 

25 triggering signals £ x for thee are 
disengaging device, and u 2R for the resetting 
likewise checked for correctness in plane 2 and if 
necessary, fault conditions identified. The models used 
are derived from the physical correlations. 

30 In the case of a fault which is'" identified' in plane 3 and 
also in plane 2, the appertaining clearing signals g 1H and 
g , R respectively are reset and a * » 

initiated via the communication system K,. 

35 , is realised in the microcomputer R^. In order 

^guarante/safe functioning of the wheel unit in the 
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event of a computer or program fault, the programs in 
planes 1 and 2 must nevertheless still run correctly in the 
event of a fault, or else incorrect running must be 
reliably identified. In the variant of embodiment 
represented, verification takes place by quest ion/answer 
communication between planes 3 and 4. The microcomputer 
system R 1A collects a question from the monitoring computer 
and answers it, in each case taking into account all the 
parts of the program that are relevant to safety, within a 
predetermined time interval. A question can be answered 
correctly only if there is fault.- free running of the 
programs for the computer functioning test and the command 
test. The partial answers formed from the partial programs 
are combined to form an overall answer and fed to the plane 
4 in the monitoring component. 

This plane is realised in the monitoring component. In it, 
the overall answer supplied by the microcomputer R 1A is 
checked in respect of the time interval of arrival and for 
agreement, with accuracy to the last bit, with the correct 
answer matching the question. In the case of incorrect 
running of the question/answer communication with plane 3, 
the clearing signals e 1H and e 2R respectively are switched 
off in the monitoring component R 1B . 

In another variant of embodiment (variant 2) , the functions 
of two wheel units on a diagonal or on an axle are 
integrated into one wheel -pair unit in a manner 
corresponding to the previous embodiments. The structure 
of this variant of embodiment of the electromechanical 
braking system is represented in figure 6. 

In variants 1 and 2 of the electromechanical braking 
system, in the case of a power supply or one of the 
communication systems K x or K 2 failing, there are always two 
wheels which are no longer ready for braking. This 
disadvantage is avoided in variant of embodiment 3. The 
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structure of this variant is represented in figure 7 , and 
its wheel unit in figure 8. This variant differs from 
variant 1 which has been presented, in particular through 
the fact that : 

the wheel modules of the front wheels are connected, by the 
redundant communication systems K x or K 2 in each case, to 
the other system modules, and that the wheel modules of the 
front wheels are fed with the aid of both power sources. 

The functions described are realised by corresponding 
programs which run in the corresponding computers. 
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Appendix: List of terms 



a Ri/ a R2/ a R3/ a R4 : Dec e 1 erat i ons of the wheels 

a v,ref a H, ref : Reference value for the difference in 

deceleration between the wheels on the 
front and rear axles respectively 
a y : Transverse acceleration 

b lf b 2 , b 3 , : Measured signals for the driver's wish 

(for example brake pedal angle) 
b 4 , b 5 : Measured signals for the wish for 

parking braking 

f 

kB,re P ,i' fc>B,rep,2 : Reference values for the wish for 

service braking 
b F,rep,i/ t > F,rc P ,2 : Reference values for the wish for 

parking braking 
C: Internal communication system 

c lf c 2 : Diagnostic signals of the state of 

charge of the power supply arrangements 
d: Triggering signal of a diagnostic unit 

dpi/ d p2 : Status messages about the condition of 

the electromechanical braking system 
d s : Servicing interface in the pedal module 

<*v : Fault signals of the processing unit 

d x , d 2 , d 3 , d 4 : Fault messages of the wheel units 

E lf E 2 : Power supply 

e iH/ e 2H/ e 3H' e 4H : Logical triggering signal for the power 

electronics of a wheel unit 

e iR/ ®2R' e 3R' e 4R* Logical triggering signal for the power 

electronics of the resetting 
arrangement of a wheel unit 

f b, reo,i/ F s,res,2 : Guide quantity for the total force of 

the service brake 

F re8 : Guide quantity for the wish for braking 

force 

F H : Guide quantity for the clamping force 

(or wheel braking moment) for the 
wheels of the rear axle 
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F F : Guide quantity for parking braking 

force 

F F,res,i/ F F,res,2 : Guide quantity for the total force of 

the parking brake 
5 F H : Guide quantity for the clamping force 

(or wheel braking moment) for the 
wheels of the rear axle 
F 1# F 2/ F 3 , F 4 : Guide quantity specific to the 

individual wheel for wheel braking 
10 force or wheel braking moment 

f if' F 2F' F 3F* F 4F : Selected guide quantity specific to the 

individual wheel for the wheel clamping 
force or wheel braking moment 
F u> F 2i' F 3i' F 4i : Actual value for wheel braking force or 
15 wheel braking moment 

f 1# f 2 , f 3/ f 4 : Triggering signal for the 

electromagnetic clutch in a wheel unit 
9ih< 92H' 93H' 9*h : Logical triggering signal for the power 

electronics in a wheel unit 
20 9ir/ 92r/ 93R/ 94R : Logical triggering signal for the power 

electronics of the resetting 
arrangement in a wheel unit 
i 1K , i 2K/ i 3K , i 4K : Current for triggering an 

electromagnetic disengaging device in a 
2 5 wheel unit 

iiH/ ^2H' isH/ i4H : Current for triggering the electric 

motor in a wheel unit 
iiR/ I2R' isR' i4R : Current for triggering the resetting 

arrangement in a wheel unit 
30 K x , K 2/ K 3 : Communication arrangements 

LE 1H/ LE 2H/ LE 3H/ LE 4H : Power electronics for triggering the 

electric motor 

LE 1K , LE 2K , LE 3K/ LE 4K : Power electronics for triggering the 

electromagnetically actuated 
35 disengaging device 

LE 1R/ LE 2R/ LE 3R , LE 4R : Power electronics for triggering the 

resetting arrangement 
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n i / n 2 , n 3 , n 4 : 

10 

S H1 / S H2 / S H3 , S H4 : 

1 5 S R1 , s R2 , S R3 , S R4 : 
Si to S n : 
U 1# U 2 : 

u ih/ U 2H , U 3H/ U 4H : 

20 

U 1R , U 2R/ U 3R , U 4R : 

25 v F : 

X dl f X d2 , , : 

Zj, z 2 : 

30 6 L : 

*: \ 
AS V,ref AS Kref 



Sensor system for determining the state 
of charge of an energy supply 
Measured values for wheel rotational 
speeds 

Microcomputers in the pedal module 
Monitoring components in the pedal 
module 

Control signals for initiating an 
altered processing flow in the wheel 
units 

Clamping path of the brake disc or 

v. 

brake drum or angle of rotation of the 
electric motor or of the gear unit 
stage 

Slip of the wheels 

Memory cells in the wheel modules 
Input interfaces of the pedal unit 
Triggering signal for the brake light 
Triggering signal for the power 
electronics of the electric motor in 
the wheel unit 

Triggering signal for the power 
electronics of the resetting 
arrangement in the wheel unit 
Estimated value of the vehicle speed 
Regulating difference in a wheel unit 
Signal for initializing and switching 
off the components of the braking 
system 

Steering angle 
Yaw angle velocity 

Reference value for the difference in 
slip between the wheels on the front 
and rear axles respectively. 
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Claims 

1. Electromechanical braking system for a motor vehicle, 
having at least one control unit (12a, 14a, 16a, 18a) which 
is associated with at least one wheel brake and which, on 
the basis of a given value, controls an actuator for 
actuating the wheel brake (12b, 14b, 16b, 18b) , 
characterised in that the actuator comprises an electric 
motor (M1H) and a locking arrangement, in particular a 
disengaging arrangement (Kul) , wherein, for the purpose of 
actuating the wheel brake via the electric motor, the 
locking arrangement is first of all released, and the said 
locking arrangement is closed again after actuation has 
been terminated. 

2. Electromechanical braking system for a motor vehicle, 
having at least two control units (12a, 14a, 16a, 18a) 
which are associated with at least two wheel brakes and are 
supplied with power by different power supply systems and 
which, on the basis of given values, control actuators for 
actuating the wheel brakes (12b, 14b, 16b, 18b) , 
characterised in that the actuator has an additional 
resetting facility (MIR) which, in the event of a fault at 
one wheel brake, is actuated by the control unit of another 
wheel brake. 

3. Braking system according to one of the preceding claims, 
characterised in that each control unit carries out 
regulation of the braking force or brakincj moment, wherein 
a regulating intervention takes place if the deviation 
between the given value and the actual value exceeds a 
predetermined limit value, or if the change in the 
deviation exceeds a limit value, and wherein the locking 
arrangement is first of all released and then the electric 
motor is triggered in proportion to the deviation. 
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4. Braking system according to claim 3, characterised in 
that, if both conditions are not fulfilled, the triggering 
of the locking arrangement is terminated and the electric 
motor switched so as to be devoid of current. 

5 

5. Braking system according to one of the preceding claims, 
characterised in that the control unit contains a 
microcomputer system which is checked for faults, and 
triggering of the electric motor and of the locking 

10 arrangement is possible only in the ''case of fault-free 
■operation. 

r 

6. Braking system according to one of the preceding claims, 
characterised in that, in the case of a fault which 

15 prevents releasing of the brake, the regulating operation 
is discontinued and release takes place via the additional 
resetting arrangement. 

7. Braking system according to one of the preceding claims, 
20 characterised in that a fault which prevents releasing of 

the brake is ascertained on the basis of the braking moment 
or braking force measured. 

8. Braking system according to one of the preceding claims, 
25 characterised in that the fault information is evaluated in 

a further unit which i^ in communication both with the 
' control unit of the actuator affected by the fault and also 
with the control unit for the resetting arrangement, and 
which conveys to the latter the command for triggering. 

30 

9. Braking system according to claim 8, characterised in 
that the electric motor and resetting arrangement are 
supplied with power by different power supply systems. 

10. Any of the braking systems substantially as hereinbefore described with 
reference to the accompanying drawings. 
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